mirror of
https://github.com/Part-DB/Part-DB-server.git
synced 2025-06-28 12:40:08 +02:00
Properly escape user provided data in trans with data to prevent possible XSS attack vectors.
This commit is contained in:
parent
6ff60e556e
commit
5f39d8e594
3 changed files with 3 additions and 3 deletions
|
@ -67,7 +67,7 @@ class PartDataTableHelper
|
|||
'<a href="%s">%s%s</a>',
|
||||
$this->entityURLGenerator->infoURL($context),
|
||||
$icon,
|
||||
htmlentities($context->getName())
|
||||
htmlspecialchars($context->getName())
|
||||
);
|
||||
}
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue